$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft File: uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft (raw, json) Hash identifier: Q+kZrJQCOjw2y5L3ClGONMRi36/GJaGfzqCE1UoJ2Fw= Subject key identifier: D8:DF:81:0C:32:51:E9:D9:1E:89:CB:49:D9:0A:5B:C2:51:4B:DC:9B Authority key identifier: B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB Certificate issuer: /CN=A91E5C49/serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Certificate serial: 075F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft Manifest number: 0EBD Signing time: Sat 10 May 2025 21:13:23 +0000 Manifest this update: Sat 10 May 2025 21:13:23 +0000 Manifest next update: Sat 17 May 2025 21:13:23 +0000 Files and hashes: 1: uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl (hash: v+KbJKLOV+iCzIDCPihwsHdiKwJsJDOC6WLIDJziJJM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1887 (0x75f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=B97D8F253456809449EDE5DC5CA2569A84E783DB Validity Not Before: May 10 21:13:23 2025 GMT Not After : May 17 21:13:23 2025 GMT Subject: CN=681fc173-bf5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:40:1b:63:ca:9c:88:88:d5:67:e9:a4:f1:1e: d6:ee:a2:41:ec:15:5d:f8:53:f5:1b:67:f9:49:80: a8:53:b8:60:de:b1:26:ae:cd:2c:bc:b7:15:f7:50: 08:8a:8e:6c:e5:e2:67:fd:53:63:d9:b7:7d:e9:ca: cd:7e:a3:ae:66:bc:06:a8:f4:57:3c:5c:70:96:e2: 35:f2:67:f7:01:51:65:f9:28:b6:f4:c8:be:f4:9a: 19:b7:f5:9d:1f:94:cf:a1:50:34:40:81:68:36:1e: 0b:dc:4c:e5:b8:5b:38:f8:88:74:59:81:2d:ce:81: a5:62:b7:3e:c1:8c:72:5c:58:2a:fd:06:d6:0b:8e: 4b:bd:d3:81:db:34:6e:cf:39:e4:18:ce:3b:90:d8: a6:3b:2b:ce:c8:10:67:5d:12:62:8f:80:70:e6:6b: 5b:cb:68:0f:ea:be:27:c3:d0:85:6e:e5:46:85:23: 99:1b:af:22:fc:b1:f5:91:09:5a:ce:06:a0:88:0c: b0:1a:aa:80:5a:24:3b:7d:ec:27:b2:f9:12:16:d7: e1:3d:48:00:b2:54:50:18:e6:fe:b9:9b:7e:18:de: 96:ec:94:a9:7d:04:ad:8b:1a:1b:bb:ab:18:95:04: 98:44:b5:17:4f:8a:19:de:09:d2:9a:30:6e:10:f3: 0e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:DF:81:0C:32:51:E9:D9:1E:89:CB:49:D9:0A:5B:C2:51:4B:DC:9B X509v3 Authority Key Identifier: keyid:B9:7D:8F:25:34:56:80:94:49:ED:E5:DC:5C:A2:56:9A:84:E7:83:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uX2PJTRWgJRJ7eXcXKJWmoTng9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/uX2PJTRWgJRJ7eXcXKJWmoTng9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4e:66:c0:74:0e:73:db:f7:2c:33:f0:7a:19:66:02:db:75: 3c:3d:e2:78:69:24:69:d7:d3:f6:4f:f6:b8:5f:f9:d3:c0:07: 81:1b:92:59:92:fc:b4:b7:4f:fb:c6:cf:09:39:dc:82:82:14: 5d:a2:8a:57:89:39:e8:be:e8:dc:2f:4d:7f:78:42:7b:8b:ac: 60:a9:69:1e:c9:7f:10:57:78:ec:28:17:21:ad:81:6b:fb:e4: 45:f5:cc:3b:2b:67:0e:f4:3d:54:9a:36:94:2f:51:2f:b0:df: d5:b0:ee:fe:a5:dc:d5:e5:d6:07:de:be:f6:ed:bf:33:29:c6: 3a:e7:4c:cb:0d:30:6e:19:4e:e7:e0:6e:85:47:bd:dc:f1:29: c3:da:2b:3c:8a:bb:1e:eb:f9:ee:9c:40:46:9e:79:c2:57:0b: b6:10:be:72:cd:14:0c:e3:b1:69:45:8d:74:44:9b:d6:3f:87: f9:e1:10:21:c2:27:72:19:65:7a:9f:f3:7c:8b:4a:18:6c:2e: 2f:0f:60:fe:ca:98:29:9c:fe:47:ad:9b:7a:b0:26:37:b4:75: 1e:89:08:21:28:00:5b:f6:be:c8:85:08:56:e5:19:78:0b:93: 5b:5a:f3:56:70:cb:13:58:e7:3c:c9:54:f8:80:0f:60:58:18: b3:e1:b7:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKEI5N0Q4RjI1MzQ1NjgwOTQ0OUVERTVEQzVDQTI1NjlB ODRFNzgzREIwHhcNMjUwNTEwMjExMzIzWhcNMjUwNTE3MjExMzIzWjAYMRYwFAYD VQQDEw02ODFmYzE3My1iZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnkAbY8qciIjVZ+mk8R7W7qJB7BVd+FP1G2f5SYCoU7hg3rEmrs0svLcV91AI io5s5eJn/VNj2bd96crNfqOuZrwGqPRXPFxwluI18mf3AVFl+Si29Mi+9JoZt/Wd H5TPoVA0QIFoNh4L3EzluFs4+Ih0WYEtzoGlYrc+wYxyXFgq/QbWC45LvdOB2zRu zznkGM47kNimOyvOyBBnXRJij4Bw5mtby2gP6r4nw9CFbuVGhSOZG68i/LH1kQla zgagiAywGqqAWiQ7fewnsvkSFtfhPUgAslRQGOb+uZt+GN6W7JSpfQStixobu6sY lQSYRLUXT4oZ3gnSmjBuEPMOMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjfgQwy UenZHonLSdkKW8JRS9ybMB8GA1UdIwQYMBaAFLl9jyU0VoCUSe3l3FyiVpqE54Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dKUko3ZVhjWEtKV21vVG5n OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VYMlBKVFJXZ0pSSjdlWGNYS0pXbW9Ubmc5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi91WDJQSlRSV2dK Uko3ZVhjWEtKV21vVG5nOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeTmbAdA5z2/csM/B6GWYC23U8PeJ4aSRp19P2T/a4X/nTwAeBG5JZ kvy0t0/7xs8JOdyCghRdoopXiTnovujcL01/eEJ7i6xgqWkeyX8QV3jsKBchrYFr ++RF9cw7K2cO9D1UmjaUL1EvsN/VsO7+pdzV5dYH3r727b8zKcY650zLDTBuGU7n 4G6FR73c8SnD2is8irse6/nunEBGnnnCVwu2EL5yzRQM47FpRY10RJvWP4f54RAh widyGWV6n/N8i0oYbC4vD2D+ypgpnP5HrZt6sCY3tHUeiQghKABb9r7IhQhW5Rl4 C5NbWvNWcMsTWOc8yVT4gA9gWBiz4bcR -----END CERTIFICATE-----Generated at Sun May 11 13:24:21 2025 by rpki-client